Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 12:56

General

  • Target

    f38984209554b4b254b44e3cedb76ea0_JaffaCakes118.html

  • Size

    432B

  • MD5

    f38984209554b4b254b44e3cedb76ea0

  • SHA1

    fbf013e2edbdd6fe539f2344c695d1940007be23

  • SHA256

    90525055b49ed7fff16c5245e72750ae44586d3abe03bdac05d406d2e1343b5e

  • SHA512

    eb02ba78af3c70bbea90fd962c94a3841ebbfeb62c2501b83b26486189488cb55b3db594c87d52802a099f708a760906a398a90c63a6dbc04f79e5238046190b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f38984209554b4b254b44e3cedb76ea0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    47be680908e7af53e1d695a454f285a3

    SHA1

    73416a066bb19c477d6a117c9123a62de6ceb8a7

    SHA256

    e85dd00d638619f86a894354fa4089971ceac21c4deb09da1cd36338d230e3b8

    SHA512

    991410cded604a9070be03a646c6e809af0e5758f3f446a7ef7f4723f10cb3ebbe2c0f6dfb1d5493844b44b171955c3e35c848986751770fadc0254050a4e5b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb17ee41f4537fdc0068d73e853df772

    SHA1

    ea3d6733429eecdb739d38b192789776ad8ebb8b

    SHA256

    9d7e819a7511cef2effef7b6aa6ff2faa8af60750e3be4b6c2bfcdfc5ac517de

    SHA512

    4a7212e0e7aafd6cc5168c604b5eac10c239f18207225a0b499454b1550c05393b623dc5175ad9f7eabe9078e329681248b19d67a3aec1a6d57989a28ef40e60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3a59e90b77ce69b3bd710c327c3a3a2

    SHA1

    e704ad4c16d01645f1ce842d51c5c0614f5ee958

    SHA256

    4d777425d46e4761050b138d7419e50e7f2133d3918355871b305137a5df8cb8

    SHA512

    ed01924ba4c0bab5f7438c9004a0fa4cacedd19716950fda8e8fc77d7decf1b70e3473193ee512819fdafbd81bc7432819f4f2a0a576eb5d2069dc517ff49492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    804c64bcd92907a3bd7e2cabcd0ed449

    SHA1

    16f9d6a805a470cb3584a31997c9ab85a7fa4f3d

    SHA256

    c6510f6f3c309d825cf98120952149b21a690e68d97e565ae4525191d440a589

    SHA512

    d5e845fd7feee608feadce2c8fdedab6349851788c1be1bcd200d9a890da64a84e17f31b09a5c85b7def403ce7316c88d8d2d69ed29dd2f44a8947cea62e9f10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cd4727ca68b700d64c1ca7c1c76038d

    SHA1

    3186f39b1bd623593b9732a601180a393a405894

    SHA256

    54d3a8fcb1f263e1c54fb5a701d97b0d75ab6060757cf9dd7d753e0766b86753

    SHA512

    4f4d4c103b9ddff79ec38bbd99d065d13eb6e4b7804175bcea3732d81adb95ce8f9293d33dc60b0632253d65b8f9610209585228b4d450672d3e2c010fd1ba17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8b1afa8a5e232f77881515bf1bd9a5e

    SHA1

    d27662c43828d0eb857e7dda2440086e349a47cf

    SHA256

    f028e6797fa9cc060da408833069674a06b4a006fbffbab13a165d32b4df6e5a

    SHA512

    54881ec7f8fe58798c5be0919aa8201e65b4daeed678c0d45fdb5fd6c5ec0f75232a88546b43945651155d0ed133edc042bbcc75903f05e414efc811df5c6b01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24644975217a9e126104b6ff6fde7835

    SHA1

    74152a5e6e3cd841ca3566ed26851d759e0e5ed6

    SHA256

    7540849efcb18c6bfdf7230dc7f5ea5307b23f7bb558b4b01f2f2dc081f6294f

    SHA512

    84ae93d8d409438b303010a9691a226290794e90aee8d2c50dde6252ba6a73330b099bab2a07e5359c5b8dd7eb3000ac4cb513a5a87d625f13c5f35454c7ff4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    543aedd8cdff0894627f7c334cd6a7ce

    SHA1

    eac7b3b6d8f7ed97eb2397dae970e8d775319cb8

    SHA256

    771083ecc7427f779b8fd0abdff263e7f28d3c51c0d1d5f28adc49f0be2991b0

    SHA512

    851e1652a288f16f11c4be494934f36aa71d54d5c85686e4657e4b3cd031c550d1eeb7218108352cfdfeaadb56d6686a6183338cbc28f8a8b8b63b3cedd4cd6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db1b06a22adfd7e8d660ed4eec15b21b

    SHA1

    f39e26a37f11e9f6d9e7a2a57e6d936a1e593940

    SHA256

    cb5096259fdb875b24cd3ee8b6e53fcccfc38b49ea4f1777afd5217b44ade2e0

    SHA512

    09ebc10e8dd845f59a9aa0280ba2880d6ea4d2e58256fb4c070d7bb0464a456ab5ff2156312c85d23b9ff5cd6e841ad7d3ef81ddbb00800f771bb81d67a3453a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed6a52eae29cc0cd023b07f7fdedec2a

    SHA1

    45aa88f0e865ee8518e766d6f11f9a6ea922bcfd

    SHA256

    054e4258bd8a6f516bfd1e58dd7aa1326c4ec67ffa5c1b6057f772bef15452c3

    SHA512

    d79d2f7859032847409bdcbb3b5a0bf76de617e5e55d912c823e7b5e912640bbfe3104ef2f505612bbc652cf3d87d5716e70725ede328bf2f52e8a5432ab90bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea3776aede841767ed5bdc4930d1362

    SHA1

    fd338664fbc708dea8387c0b0e663e6b8db24185

    SHA256

    adfedb81cc272d99301cfb70478e36748f00ac1d4200bbfa5b9baa3708e060f6

    SHA512

    ce7756c993fc541371b6e3c4ff9212ab5e9a9c33f6d2839420ad4de21c04b4b0d7c599b4db670e44f4822ed535cc7ff109b7d5a2c005967a09313c4676b974d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fc990cf1317e4cec700b7dd0a278411

    SHA1

    a9eeefed278069dc356ea7783baf4050c85c8dab

    SHA256

    25ef86a4eaa3d15ec2dd2f0680cb31e7764006a0ba0ae7791996f2509a25301a

    SHA512

    cc1351b875559d509ed84ba69da9228da97454af012b87f60d473d9712e1f8b5aa0b265e2f2cbefc535275474ae6bd2ba8e504291ffb106c445d198e3a27dd7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d68cacc606b5718a447310305611da2

    SHA1

    e06534bf3dbc7dfff852c945aebf8d3351e38282

    SHA256

    f2efa73346ec93dadab6608286f1962ad024c5403314ed6665d1d56967a158f0

    SHA512

    aef4bbe6010423d589a7ab56ce6d57cd2542cc72285806420ea5b0d33d18a6c8fc9f4861e45493ce57ee512ee56111f054b3662c4490b73839b3afb2da38e057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15fe0e3ea40358d891337c1f8efcbd08

    SHA1

    ac66eaa0504dc903dc6ae97a2bdbaec6a76eed9e

    SHA256

    bbf957da5cccf78181f444565650d62e53215d3dd7f90df0b70282a10d7c36b0

    SHA512

    4c3affe1323c66c0b9e705c0f1919d05f3b4a73168980ed59e9bedfd40467fd9e22b0554eac4b988c5fd2edc0ff6159f1ace9abacf0675def40f3b146abfb228

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edd5ae231b189e5e80c55e9d0df58974

    SHA1

    7fd3a8e8fe7d81d5528f4388878b3824abcb430b

    SHA256

    3401381b334ce01f5f01cb445acfd4bc55f6a460e78c148f3eadab2521779317

    SHA512

    5fc4bc97b58d8d038e892ff678a9ae50f98fae806679057f71268b96095476ffe6b2bf490f82773c98b49416905a086b88831e967949325fec5463bfefca3e1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af515242c7d4e73410d6f0c52a2b0857

    SHA1

    09db4f0cb1381b5c3335eff7fd4f43d3e77a1121

    SHA256

    cd0c9ea538f93ef6e3a41e19e843be6b7c19da3228a681570bdf83b1aa31e4f9

    SHA512

    6fa9bf387b9046977f57375feb7f3ced09fc6c289aeabf33b89328e29d7a3adccd8783bf85668ce89f9f65cfec73835196d5ca8eee8cc464ccbd907a4957af09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfddedac698a133f382ca4c1b1c3cdb7

    SHA1

    4db946018ffda03b3d44437e6a444aab6e73662f

    SHA256

    fd4d15060866e0a6758a4ce889f10ce9490ff0bbd95e69267bf2d3ee20923fbb

    SHA512

    72f48d5ca11905c5868fdb2ff53db85e1e7de6f6bd0ed1d75b8205f1ce3ece90c6bd33c767cb0fe1c302e8ede649c47a16fdb26cd4bc9b42edd6059b7816d992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc92be30cfcec78fdd1d6993fa836dd7

    SHA1

    1f69e3102e0b947d3e8d710326bdd2ca2ccef285

    SHA256

    b1e076272e1458183529cb7b54f142f3f7c48fa4af496e651b88173940e64177

    SHA512

    83a2b5e39d94f89c2ff5e436a703bd12b1ee0dd951e147095a0d6c2d779361006bc18edd3d561ec20557686fe8968cbcc0c5fb4a5cdfb20ef0fcf2645bd288e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2697b6b4ebb4cdd6ee46b327cb17f56d

    SHA1

    710ce92c4f74eb158f8b5207a69ffb378f704985

    SHA256

    c7549fe19af5bcc472a2b9f097e7ec926a3e0e44e8e1d53bea755b50a71a9b85

    SHA512

    fb1bca2ab8c096c458e65fc5b7b72e7a9982805fe6da6e1f253a76106f43eb65488de1e69c16dd5b19167bedcf9b425c3b29f7b8d58d8aeaa2c33a062ea5ae49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86861b66fc259224958e793785d1752e

    SHA1

    279c6c5124ba027221efb4c4d44121af2470dbeb

    SHA256

    39a56f55a8630a101b96f2ca7885bb1ba8412495b7f38f5eebbec30fb05b298a

    SHA512

    688fbc058d5f3f1dab9987dc28ac1f0c5046a6ab714432f0e316526dee8b29e78300ea91f0294a62db6cf450848d8c1a6dc7bbda6250f19b719431703ee6b187

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2409716044ef74b75e3653d6c2bc3ecf

    SHA1

    850c4ae03edca5390027e589d306a0fb7b732863

    SHA256

    db7d2470951a55c5f2fb711be5b18d35e22ccddc756a4b2294310516161ae2f4

    SHA512

    288ef85cef2e8e029596068092897c62942e4c7dafda47a0ee402458f8a951b7caf0fab5937db98e3f1035b9b305577157de074c9c59ba9a6f660ffca9663624

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    caadad6d62b4801f5eeff0d37f5bcdd4

    SHA1

    08b30485c0e8a5ca2f8651ebf6603ad788c1372f

    SHA256

    9c0f7d028832c1aa887abdebd8e697786ac4fa37998274d503f7a41d42724222

    SHA512

    68a0a227f013a2893e957d703c1e79a9edc825d97afc2ef5b543fffff449a78a8b31f9d8fdf91824dfe4c23ef21b4a981e184c1da2446e49410c637df1c06620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd2de6161d816a45710a59d23b40c53

    SHA1

    aa86815ab5c42198014f925a343fa61d29481b13

    SHA256

    214b92e04f9a2c1a61259cd102cacba18fd5bb1e432a8fc237fd5d14e86adba8

    SHA512

    31f60f66eed546587419b94d729539d651bbf8963ffdcc2b5eed3e836edf7e27520596a7a4716420010534102e6045a0dd3940422db01e91fb5028a6dc4a6e92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1a9cfdde659120c296949eeaaad2171

    SHA1

    074a9ddaa6f2263ac9b94e8e812eb63280447275

    SHA256

    cf182b7f716a0975431e4bf789a651c123bce09bee5a176933a5cedea433a3a8

    SHA512

    ef95fe8eba3913a141aee35d0b50968ed281816fe593b16557287ee369c2d2a28e58325511bfe520b659b2420765fe2760819d08d2a3cdbabce7cc48f5ea88d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    228586b54a68d0b129d46e4c9f6a8a02

    SHA1

    be3e21b01e62bd68dafb71c522467a40f94e0510

    SHA256

    cfe9a82e1aba9a1c1e99bc1d306ef284eb329a1127d5dab333d7b8092b2717db

    SHA512

    e746a68969143335a0704967d97d9516c9a6d3d9ddc0c8d84ebb1ad6f2158ed04539084d173ef25a406216f9b6c8f9a7bbadacc2ab540d25a9fa10398ab8082e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\92bocja\imagestore.dat

    Filesize

    1KB

    MD5

    aa068027a642b6754b82d2c77d4c17ab

    SHA1

    9f8f5af5055c7a7542ae049ed7d92114b00d381e

    SHA256

    f454185705e005acc65a32a1f3f8af0106544a6638e942729480fee24a32440f

    SHA512

    654a684fd9f10aeaf36843a06dcf8c6ab2536eea796844b4034ad7325ee751270fd69203ef50acbaad4298790b14876e264614b1e214ab9594f5ee1fadf29e54

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OOWQLMJV\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab148A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar15D7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar16C9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a